RFR 8077102: dns_lookup_realm should be false by default

Weijun Wang weijun.wang at oracle.com
Wed May 13 14:16:08 UTC 2015

Hi All

Please take a look at


Before this fix, dns_lookup_realm true is by default. This is not 
consistent with other krb5 vendors. It also leads to lot of time waste 
when Kerberos 5 is not configured at all.

The no-krb5.conf test case in ConfPlusProp.java is removed because with 
dns_lookup_kdc still being true by default, the test can timeout on some 


More information about the security-dev mailing list